Securing Student Financials

This chapter provides an overview of PeopleSoft Enterprise Student Financials security and discusses how to:

• Set security views.

• Set security options.

• Update Student Financials security settings.

• Set security for setIDs.

• Set security for business units and cashier offices.

• Set security for item types.

• Set security for institution sets.

• Override the self-service institution set.

• Set security for companies.

• Set security for origin IDs.

• Set security for credit cards.

Understanding Student Financials Security

In Student Financials you can set security for setIDs, business units, cashier offices, item types, institution sets, companies, origin IDs, and credit cards. For each of these items, you can select to have no security, user ID security, or permission list security. You can use any of the three types of security, and you do not need to use the same type of security throughout the application. For example, you could select no security for origin IDs, user ID security for business units, and permission list security for item types.

You use the Security Options page to enter data such as the type of security for setIDs, business units and item types. The type of security that you select for each item on the Security Options page determines which of the other pages in this section you must complete. You can secure each item by user ID or permission list.

If you select user ID security for an item on the Security Options page, complete the appropriate page by selecting Design Student Administration, Secure Student Financials, User ID.

If you select permission list security for an item on the Security Options page, complete the appropriate page by selecting Design Student Administration, Secure Student Financials, Perm List.

If you select no security for an item on the Security Options page, do not complete any other page for that item. All permission lists and user IDs can access all items when you select no security.

When you set security, you give either a user ID or a permission list access to the items that you list on the page. If you do not list the item on the page, the user ID or permission list does not have access to the item.

In these sections, you can set security for each item using a user ID page or a permission list page. Complete only one of these pages, depending on the type of security that you select on the Security Options page for the item.

Note. Student Financials security works in conjunction with any other security settings that you configure in the PeopleSoft system.

See Also

Enterprise PeopleTools PeopleBook: Security Administration, "User Profiles” and "Working with Permission Lists”

Setting Security Views

To set up security views, use the Security Views component (SECURITY_VIEWS).

Before completing the security setup, you should review the delivered security views. You can also add modified security views to the system.

This section discusses how to review security views.

Page Used to Set Security Views

Reviewing Security Views

Access the Security Views page.

Search Text	Common identifier that relates to the view.
No Security View	The view that runs when no security is set.
Permission List Security View	The view that runs when security is set to permission list.
User ID Security Views	The view that runs when security is set to user ID.
Secured Field Type	When a prompt is on the field, one of the views runs depending on how security is set.

View Extensions

View names have one of three extensions:

• _NONVW indicates that the view has no security.

• _OPRVW indicates the view has user ID security.

• _CLSVW indicates the view has permission list security.

Setting Security Options

To set up security options, use the Security Options component (SECURITY_OPTIONS).

You can select no security, user ID security, or permission list security for the setID, business unit, credit card number, company, institution set, origin, and item type in Student Financials. After you make selections on the Security Options page, you use other pages to enter user IDs or permission lists to secure the selected items.

This section discusses how to select security options.

Page Used to Set Security Options

Selecting Security Options

Access the Security Options page.

SetID, Business Unit, Credit Card/Check, Company, Institution Set, and Origin

For each area, select the security option that you want:

Note. If you select No Security for Credit Card / Check, all users can view the entire credit card number. If you select User ID Security or Permission List Security, only users who are granted access can view the whole credit card number.

Item Type

The following check boxes are available only if you select the User ID Security or Permission List Security options in the Item Type group box.

Updating Student Financials Security Settings

To set up Student Financials security, use the Set Security component (RUNCTL_SFSCRTY).

PeopleSoft delivers the Security Options page with no security set for each item on the page. The SF Load Security Views (Student Financials load security views) Application Engine process (SFRSCVW) that you run from this page updates system security with the selections on the Security Options page. You also must run this process if you modify any of the other pages used for Student Financials security—for example, when you modify information on the Permission List - Business Unit page. You do not need to run this process when you modify credit card security options.

This section discusses how to update security for Student Financials.

Page Used to Update Student Financials Security Settings

Updating Security for Student Financials

Access the Set Security page.

Setting Security for SetIDs

To set up setID security, use two SetID components (SETID_CLASS_SECUR and SETID_OPERATOR_SEC).

Depending on the security option that you selected for setIDs on the Security Options page, you can grant access to a setID (tableset) using permission lists or user IDs. If you select no security for setIDs on the Security Options page, do not complete the pages listed in this section, because all user IDs and permission lists have access to all setIDs.

This section lists the pages used to set security for setIDs.

Pages Used to Set Security for SetIDs

Setting Security for Business Units and Cashier Offices

To set up business unit and cashier office security, use two Business Unit components (SEC_UNITSF_OPR and UNIT_CLASS_SECURIT).

The pages discussed in this section enable you to grant security access to business units and to cashier offices within business units. If the institution does not use the cashiering feature, you do not need to set up cashier security, but you can set up business unit security.

Depending on the security option that you select for business units on the Security Options page, you should grant access to a business unit and cashier office using permission lists or user IDs. If you select no security for business units on the Security Options page, you do not need to complete the pages discussed in this section, because all user IDs and permission lists have access to all business units.

This section lists prerequisites and discusses how to:

• Grant a permission list access to business units and cashier offices.

• Grant a user ID access to business units and cashier offices.

Prerequisites

Before you set security for business units and cashier offices, you must:

• Set up business units.

• Set up cashier offices.

Pages Used to Set Security for Business Units and Cashier Offices

Granting Permission List Access to Business Units and Cashier Offices

Access the Permission List - Business Unit page.

Enter the business unit that you want this permission list to access.

To grant the permission list access to a cashier office, select the cashier office (within the business unit) that you want this permission list to access.

If you do not want to grant access to a business unit or cashier office, do not include the business unit or cashier office on this page.

Granting a User ID Access to Business Units and Cashier Offices

Access the User ID - Business Unit page.

Enter the business unit that you want this user ID to access.

To grant the user ID access to a cashier office, select the cashier office (within the business unit) that you want this permission list to access.

If you do not want to grant access to a business unit or cashier office, do not include the business unit or cashier office on this page.

Setting Security for Item Types

To set up item type security, use these components: Item Type (SEC_ITEM_CLS and SEC_ITEM_OPR), Item Type Security (ITEM_TYPE_VW_CLS), and View Item Type Security (ITEM_TYPE_VW).

Depending on the security option that you select for item types on the Security Options page, you grant access to item types using permission lists or user IDs. If you select no security for item types on the Security Options page, you do not need to complete the pages discussed in this section, because all user IDs and permission lists have access to all item types.

This section lists prerequisites and discusses how to:

• Set item type security by permission list.

• View item type security by permission list.

• Set item type security by user ID.

• View item type security by user ID.

Prerequisites

Before you can set security for item types, you must:

• Grant permission lists access to business units on the Permission List - Business Unit page, if you are securing item types by permission list.

• Grant user IDs access to business units on the User ID - Business Unit page, if you are securing item types by user ID.

• Set up the item type tree in Student Financials.

Pages Used to Set Security for Item Types

Setting Item Type Security by Permission List

Access the Permission List - Item Type page.

Item Type	Select to grant access to a specific item type. After you select this option, you can select an item type from the available options.
Tree Node	Enter to grant access to all item types within a specific node on the item type tree. If you enter a tree node, users have access to all items types defined within that node. After you select this option, you can enter a tree node from the available options.

You can enter any combination of tree nodes and item types for the permission list to access. If you select a tree node, you do not need to separately list item types that fall under that tree node.

Note. If you enter the tree node ALL—which generally includes the whole tree—select No Security for item types on the Security Options page. Granting access to the whole item type tree provides virtually no security at all.

Viewing Item Type Security by Permission List

Access the View Item Type Security page.

Item Type	Enter the item type for which you want to review permission list access. After you enter an item type, information appears in the Permission List and User ID group boxes.
Key Word	Displays the keyword if one is associated with the item type.
Permission List	Displays the name of the permission list that has access to the selected item type.

Setting Item Type Security by User ID

Access the User ID - Item Type page.

You can set access either by defining specific item types or by defining a node on the item type tree. If you select a tree node, the user ID can access all item types on that node of the tree.

See Also

Setting Item Type Security by Permission List

Viewing Item Type Security by User ID

Access the User ID - View Item Type Security page.

See Also

Viewing Item Type Security by Permission List

Setting Security for Institution Sets

To set up institution set security, use two Institution Set components (SEC_ISET_CLS and SEC_ISET_OPR).

Depending on the security option that you select for institution sets on the Security Options page, grant access to an institution set using permission lists or user IDs. If you select no security for institution sets on the Security Options page, you do not need to complete the pages listed in this section, because all user IDs and permission lists have access to all institution sets.

This section lists a prerequisite and lists the pages used to set security for institution sets.

Prerequisite

You must set up institution sets before you set security for them.

Pages Used to Set Security for Institution Sets

Overriding the Self-Service Institution Set

To set up self-service institution set overrides, use the Student Institution Set component (ISET_OPR).

The User Profiles Management feature assigns institution sets to user IDs. You use the Self Service Institution Set Override page to change the institution set assigned by the User Profiles Management feature. By overriding the institution set on this page, instead of on the User Defaults 2 page, you can view a history of the changes.

This section lists prerequisites and discusses how to override the value for an institution set.

Prerequisites

You must first set up institution sets and then assign a user ID to an institution set. A user ID must be assigned an institution set by the User Profiles Management Application Engine process (USERPROFILE) to have an institution set appear in the Calculated Value field on the Self Service Institution Set Override page.

See Also

Creating and Maintaining User Profiles

Page Used to Override the Self-Service Institution Set

Overriding the Value for an Institution Set

Access the Self Service Institution Set Override page.

Institution Set	Enter an institution set to make this value the default for this user ID in the user profile.
Calculated Value	Displays the institution set value assigned to the user ID by the User Profiles Management feature. If you do not use the User Profiles Management feature, no value appears in this field. The calculated value is the same as the Institution Set field on the User Defaults 2 page.

See Also

Setting User Defaults

Setting Security for Companies

To set up company security, use two Company components (SEC_COMPANY_CLS and SEC_COMPANY_OPR).

Depending on the security option that you select for companies on the Security Options page, you grant access to companies using permission lists or user IDs. If you select no security for companies on the Security Options page, you do not need to complete the pages listed in this section because all user IDs and permission lists have access to all companies.

Companies are used in PeopleSoft Enterprise Human Resources for payroll and pay groups. An employee's company is usually designated as the company that pays the employee's salary. You must set up company security so that you can access certain values when setting up Student Financials.

This section lists prerequisites and lists the pages used to set security for companies.

Prerequisites

You must first set up the company codes and permission lists.

Pages Used to Set Security for Companies

Setting Security for Origin IDs

To set up origin ID security, use two Origin ID components (SEC_ORIGIN_CLS and SEC_ORIGIN_OPR).

Depending on the security option that you select for origin on the Security Options page, grant access to an origin ID using permission lists or user IDs. If you select no security for origin IDs on the Security Options page, you do not need to complete the pages listed in this section because all user IDs and permission lists have access to all origin IDs.

This section discusses how to:

• Grant a permission list access to origin IDs.

• Grant a user ID access to origin IDs.

Pages Used to Set Security for Origin IDs

Granting a Permission List Access to Origin IDs

Access the Permission List - Origin page.

Enter the origin ID that you want the permission list to access. If you do not want to grant access to an origin ID, do not include the origin ID on this page.

Granting a User ID Access to Origin IDs

Access the User ID - Origin page.

See Also

Granting a Permission List Access to Origin IDs

Setting Security for Credit Cards

To set up credit card security, use two Credit Card and Bank Account components (SEC_CC_CLS and SEC_CC_OPR).

Depending on the security option that you select for credit cards on the Security Options page, grant access for viewing credit card numbers using permission lists or user IDs. If you select no security for credit cards on the Security Options page, you do not need to complete the pages listed in this section.

Warning! If you select no security for credit cards on the Security Options page, all users can view the entire credit card number.

When you assign credit card security on the two pages listed in this section, you are granting the user ID or permission list access to view the entire credit card number. This security should be granted to only a few people in the institution. User IDs and permission lists to which you do not grant credit card security access can view only the last four digits of the credit card number.

Pages Used to Set Security for Credit Cards